🟠 High ⏱ 15–60 min Last verified: 28 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: strongSwan — Heap-based buffer overflow in eap-mschapv2 plugin due to improper handling of failure request packets Related CVEs: CVE-2013-2944 CVE-2013-5018 CVE-2013-6075 CVE-2013-6076 CVE-2014-2338 CVE-2015-3991 CVE-2015-4171 CVE-2015-8023 +12 more Upstream summary: […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygems — request hijacking vulnerability Related CVEs: CVE-2013-4287 CVE-2013-4363 CVE-2015-3900 Upstream summary: Jonathan Claudius reports: RubyGems provides the ability of a domain to direct clients to a separate host that […]
🟡 Medium ⏱ 10–30 min Last verified: 28 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Authen-SASL — Insecure source of randomness Related CVEs: CVE-2025-40918 Upstream summary: p5-Authen-SASL project reports: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ruby Activemodel Gem — Circumvention of attr_protected Related CVEs: CVE-2013-0276 Upstream summary: Aaron Patterson reports: The attr_protected method allows developers to specify a blacklist of model attributes which users should […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fcgi — Heap-based buffer overflow via crafted nameLen/valueLen in ReadParams Related CVEs: CVE-2025-23016 Upstream summary: [email protected] reports: FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant […]
🟡 Medium ⏱ 10–30 min Last verified: 27 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2022-3109 CVE-2022-3341 CVE-2022-3964 Upstream summary: NVD reports: An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return […]
🟠 High ⏱ 15–60 min Last verified: 27 March 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wolfssl — multiple issues Related CVEs: CVE-2015-6925 CVE-2015-7744 CVE-2020-12966 CVE-2021-46744 CVE-2022-34293 CVE-2025-11931 CVE-2025-11932 CVE-2025-11933 +5 more Upstream summary: wolfSSL blog reports: This release includes multiple fixes across TLS 1.2, TLS […]
🟢 Low ⏱ 5–15 min Last verified: 26 March 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: quake2 — multiple critical vulnerabilities Upstream summary: An advisory published by Richard Stanway describes numerous critical vulnerabilities in the Quake II engine: Due to unchecked input at various stages in […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdk-pixbuf2 — a heap buffer overflow Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 CVE-2015-4491 CVE-2015-7673 CVE-2015-7674 CVE-2025-7345 Upstream summary: [email protected] reports: A flaw exists in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and […]
